Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/87QKxOT5zqKQKgJRNFWFSqCI-68.roa
File: 87QKxOT5zqKQKgJRNFWFSqCI-68.roa (raw, json)
Hash identifier: W2jJtx5xtJMtIscxdM/Vz/FE9PYt4eNyahzZl8H0zt4=
Subject key identifier: F3:B4:0A:C4:E4:F9:CE:A2:90:2A:02:51:34:55:85:4A:A0:88:FB:AF
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 0192B8BBEEF64F9A76ECCDC916418B35D05C
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/87QKxOT5zqKQKgJRNFWFSqCI-68.roa
Signing time: Wed 23 Oct 2024 09:36:17 +0000
ROA not before: Wed 23 Oct 2024 09:36:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48449
IP address blocks: 46.20.99.0/24 maxlen: 24
46.20.107.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.160.195.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 20:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b8:bb:ee:f6:4f:9a:76:ec:cd:c9:16:41:8b:35:d0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Oct 23 09:36:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3b40ac4e4f9cea2902a02513455854aa088fbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:a1:94:9b:20:47:bb:16:3f:1e:cb:43:e4:
8f:bb:ca:2a:e7:08:18:2f:83:fc:d9:f3:e5:20:74:
71:61:e9:c2:4c:1a:a5:8c:0b:9c:8b:ed:00:03:06:
19:c7:93:c2:e2:17:dc:83:ed:48:44:c0:40:3a:bb:
56:00:9c:81:84:47:de:44:17:5f:de:15:71:3a:de:
55:c0:f3:36:cf:55:0c:a4:b5:d7:8f:b9:51:88:ca:
a0:c5:95:d8:10:69:0c:d2:ee:e3:eb:fa:b5:9e:c2:
a1:cd:b3:5d:59:8f:24:bf:ba:e7:2e:f2:eb:92:c5:
5c:1e:c4:aa:b3:fc:00:4a:8f:09:8e:d1:9d:41:ed:
61:a8:06:b5:b7:40:e0:24:12:89:56:6d:61:cf:e8:
fc:2a:9c:d9:21:a9:72:4b:95:d7:8b:f3:fd:d1:3f:
a2:58:a2:47:eb:08:95:c5:8d:cf:0e:e2:6f:db:bb:
75:bb:e5:e1:e7:42:6f:04:8b:e3:e1:9f:da:83:5e:
f4:e5:44:73:29:ca:da:e5:88:ee:1e:e2:6a:07:e0:
3f:3a:25:a7:10:17:c9:99:0f:dd:06:49:b5:a4:72:
80:f9:b5:c9:06:d0:05:45:0a:81:c9:5b:be:5d:db:
50:84:a3:65:e1:de:c7:d6:78:38:6a:e2:7b:e0:5b:
4e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B4:0A:C4:E4:F9:CE:A2:90:2A:02:51:34:55:85:4A:A0:88:FB:AF
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/87QKxOT5zqKQKgJRNFWFSqCI-68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.99.0/24
46.20.107.0/24
185.160.194.0/23
185.169.221.0-185.169.223.255
Signature Algorithm: sha256WithRSAEncryption
9f:47:5c:96:d3:c0:37:19:d3:f9:09:6e:cd:58:ab:89:55:46:
7c:b7:c0:68:db:62:52:ad:bf:8a:b1:2b:66:53:cd:44:c0:1b:
fd:9a:6a:fb:85:40:38:5a:b3:94:ac:29:20:b2:d3:32:aa:76:
f4:8f:34:53:a9:1d:ae:5d:53:c2:40:9c:e8:a7:40:f9:52:9f:
eb:5f:9f:a6:dd:02:98:ed:32:36:91:a5:64:b1:52:b9:cf:32:
5e:28:b2:d0:d3:15:aa:89:5b:c1:7e:b3:08:51:38:4d:75:eb:
45:2c:75:c0:c7:9c:a3:6b:3a:94:51:26:38:20:93:5c:e3:8d:
1c:66:3c:3d:93:de:64:d0:07:fe:ea:60:19:1e:41:9b:e1:e5:
68:9e:5b:df:8d:92:3f:70:37:8d:24:69:9a:10:71:56:4b:c4:
36:02:24:23:df:93:d9:d5:79:50:9f:b9:4d:37:3d:31:54:3c:
94:17:c1:68:0d:70:c1:16:21:5c:44:3a:2f:4e:ae:ad:07:eb:
78:f9:62:97:c3:79:3d:a0:05:c2:c6:77:53:11:9f:fe:bb:95:
e8:ae:68:80:35:d0:0b:a5:a7:0f:4f:fe:72:5f:17:c8:50:86:
ce:3e:dd:b5:cf:cb:14:dd:f5:1a:f7:57:a7:6e:c4:f3:5e:f3:
18:18:76:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:15:29 2025 by rpki-client